Quantstamp
79,348 followers
Jonathan Shroyer 
Sergio Mariscal 
human_not_bees 
Sebastian Banescu (@banescusebi), CEO of @ChainproofDAI & Head of Quantstamp Germany will be speaking at @DefiTalents’ session today about “The relation between NFTs, DeFi, and Smart Contracts” 📅
Thank you to everyone who joined us this week with @tbc_munich!
Sebastian Banescu (@banescusebi), CEO of Chainproof & Head of Quantstamp Germany discussed smart contract bugs and how to protect against such bugs.
Check out some of our snaps from the event 📸H
So how was this attack possible? 🤔
The attacker MUST HAVE known the private key of the ProxyAdmin owner (i.e., Ankr deployer address) since the function upgrade() was protected by the modifier onlyOwner.
B) 000000000000000000000000000000000000007e37be2022c0914b2680000000, which is 10000000000000000000000000000000 in decimal, i.e., 10^13 * 10^18 = 10^13 tokens where the token’s decimals are 18.
Two arguments are passed to the function:
A) 000000000000000000000000f3a465c9fa6663ff50794c698f600faa4b05c777, which is the attacker’s account address that receives the tokens…
bscscan.com/address/0xf3a4…
The attacker then calls the function 3b3a5522 to mint tokens in the next transaction.
bscscan.com/tx/0xe367d05e7…
Although there is no contract code uploaded, you can see the lack of modifier in L99 in the decompiled code.
Note: the function selector is 3b3a5522.
bscscan.com/bytecode-decom…
In contrast to the legitimate implementation, the malicious contract contains a clone of the function mint() but without the modifier onlyMinter.
The attacker uses the account above and interacts with a ProxyAdmin contract to call the function upgrade() on the aBNBc token proxy contract to change the implementation from a legitimate implementation to a malicious one.
bscscan.com/tx/0xcbc5ff4a6…
Let’s start with the Ankr deployer address the attacker had access to 👇
bscscan.com/address/0x2ffc…2
Quantstamp is still looking to fill our Applied Cryptographer position!
We’re a thriving and growing remote-first company with unbeatable perks. Learn more about this role and apply here: bit.ly/3OVtkpr 🛡️D
Our deepest condolences. TT was a humble leader, a pioneer and a friend. He will be missed. twitter.com/mrjasonchoi/st…
Catch us next Wednesday with @tbc_munich where Sebastian Banescu (@banescusebi), CEO of Chainproof and Head of Quantstamp Germany will be talking about smart contract bugs and how we find them using our audit methodology 🐛🕵️♂️
Register eventbrite.com/e/introduction…5IZ
@cz_binance Hey CZ, great idea. We’ve actually been doing this already for good teams in the ecosystem that were unfairly affected. Happy to join forces on the recovery fund.
Retweeted by Quantstamp 🧪 Offchain Labs aquires Prysmatic Labs
🛡️ Audits fo@MolochDAOAO@TheSandboxGameme@NFTcomofficialal and more
💻 Hiring for multiple positions including cryptographers and auditing engineers
Here’s what happened at Quantstamp in Octoberquantstamp.com/blog/quantstam…7djd
What properties should an escape hatch mechanism have to be deemed trustworthy and compatible with decentralization?
Join Dr. Jan Gorzny, Head of L2 Scaling, on Nov 8th at #DICG22 as he presents the research paper:
“Ideal Properties of Rollup Escape Hatches” 🪜✨
Retweeted by Quantstamp Quantstamp is looking for an Applied Cryptographer!
We’re a thriving and remote-first company with unbeatable perks. Learn more about the role and apply here: bit.ly/3FUMkBW 🛡️S
Check out this recent talk @OracleSummit by Sebastian Banescu (@banescusebi), CEO of @ChainproofDAI and Head of Quantstamp Germany 👇
The presentation discusses the workflow of DeFi insurance claims and how the process could be automated using oracles 🦾twitter.com/hackernoon/sta…Ojd
We captured this shot of @whatupjeff showing off his sketched portrait 🙌
Attended the event? We'd love to see your photos! Give us a tag and we'll repost our faves ✨X
Thank you to everyone who joined us this week for an amazing evening to wrap up the Crypto Economics Security Conference at Berkeley!
We had a blast meeting everyone and seeing your awesome sketch paintings! 🎨✨
Here are some of our favourite snaps of the night�BH
ATTN. all blockchain baddies at #SolanaBreakpoint, there’s still time to register for tomorrow’s social hour with @6thManVentures, @BigBrainVC, & @Quantstamp at our ✨secret✨ location ❁↓
lu.ma/BuildersHappyH…
Retweeted by Quantstamp 1/ Introducing Soho.
The social commerce platform for digital collectors. Founded by former Instagram leaders.
sohoxyz.medium.com/introducing-so…
Retweeted by Quantstamp 📢 Introducing the 2 new members in our Governance Council (GC)!
@Swapscannerr @Quantstampp
Find out more about them here:ow.ly/NTjl50LsJTqn
Retweeted by Quantstamp Check out some clips from the Quantstamp team’s last retreat in CROATIA 🇭🇷📽️✈️
🤫 P.S. We’re hiring, so make sure to check out our open positionsquantstamp.com/careersJTWb. Maybe we’ll see you at the next retreayoutube.com/watch?v=dGpqhc…IIOZ
Congrats to @NiftyApes team for raising $4.2 million round led by @variantfund & @fintech_io🫡
Recently,@zherringg &@captnseagravess joined@sabsnftt & Tyler on Curated podcast to discuss the platform & what the future looks like for NFT loans.
YouTubebit.ly/3WyuA5xlef
Retweeted by Quantstamp The Quantstamp Mixer for CESC attendees is happening today 📢📢
Join us for live music, art and tacos while networking with the web3 community!
📍 David Brower Center • 2150 Allston Way
⌚ TODAY @ 7PM- 10PM
🌮 Complimentary food and beverages
Was a great hackathon thanks to all @_HerDAO, @Quantstamp, @_herhacks, @SolanaFndn, @Algorand, @tezos @NEARProtocol 🙏🙏
See you soon for a next hac@Web3Hubsbs ✈Vm
Retweeted by Quantstamp The paper reviews approaches from rollups developed by the community, potential issues, and a wishlist of properties that an escape hatch mechanism should have 👩💻✨
Rollups are a popular layer two scaling solution that cut costs and speed up transactions, and are becoming an integral part of the Ethereum ecosystem.
However, their complexity and larger attack surface means escape hatches are crucial 🪜💪
DICG22 is focused on distributed infrastructures that enable human interactions and economic activity with a focus on the common good 🌐👥
Written by Quantstamp engineers Dr. Jan Gorzny (@jgorzny), Po-An Lin (@boolafish945), and Dr. Martin Derka (@MartinDerka).
Congratulations on this paper being published 🎉🎉
What properties should an escape hatch mechanism have to be deemed trustworthy and compatible with decentralization?
Join Dr. Jan Gorzny, Head of L2 Scaling, on Nov 8th at #DICG22 as he presents the research paper:
“Ideal Properties of Rollup Escape Hatches” 🪜✨
Heading to @SolanaConf in Lisbon? Make sure you check out Builders Happy Hour for a night of mingling, drinks, and selfies! ✨
📍Secret Bar (stay tuned for details!)
⌚️November 5th, 5:00-8:00 PM
RSVP below to secure your spot 👇#SolanaBreakpointntlu.ma/BuildersHappyH…QE
Did you catch our panel @NEXTBermuda? 🎣
Dr. Sebastian Banescu, CEO of Chainproof and Head of Quantstamp Germany, sat down with Stafford Lowe to talk about Bermuda’s first digital asset business association and@ChainproofDAII ⛓️🛡S2
🚨🚨
1/ We're excited to announce the 1st Metaverse Economic Forum#MEFEF) to foster TRUST amongst the community (@__TheFlock__ ) of builders and enjoyers of Metaverse financial infrastructure
DATE: 11/4/22
LOCATION: London (during NFTLondon)
REGISTERmef.digitalqxb
Retweeted by Quantstamp Are you ready? 🏁🏁
Gear up with us for WOMENHACK in Lisbon - The Women's Conference and Hackathon 👯♀️
📍 WHERE: Montes Claros - Lisbon Secret Spot
⌚️ WHEN: Oct 30 - 31st, 08:30-17:00 WET
🎟️ Reventbrite.pt/e/1st-ever-wom…ont1PO
Rollups are becoming mainstream components of the Ethereum ecosystem, but their complexity and larger attack surface means escape hatches are crucial 🪜🛡️
Dr. Jan Gorzny, Head of L2 Scaling, discusses escape hatches and some of their ideal properties ✨quantstamp.com/blog/rollup-es…cH
.@sebaudet26 is co-founder of @zapper_fi & joins host @sabsnft.
@zapper_fi is a web3 tool allowing wallet tracking across NFTs, DAOs, DeFi & more.
Lots of insights from Seb especially on ideation, building in a bear mkt & finding new users.
YouTube�bit.ly/3TpC2OdWf
Retweeted by Quantstamp Dr. Sebastian Banescu (@banescusebi), CEO of @ChainproofDAI and Head of Quantstamp Germany, recently took part in a panel at the Crypto Assets Conference organized by @fsblockchain 👏
Thank you to everyone who was able to join us!
#CAC22BBF
Looking for Senior #Rust Engineers!
Quantstamp is a thriving and remote-first company with unbeatable perks. Join us and help shape the future of web3.
More: bit.ly/3VG8jCc 🛡️Q
Learn more about what it’s like to work at Quantstamp 👇youtube.com/watch?v=IxqAlO…f
Thank you to everyone who joined us at RaveQuest! ✨
So excited to have brought together an incredible lineup of Colombian artists and performers to create a unique experience for our guests!
Share the best photos you have below for the chance to win some exclusive swag 🤩u
Devcon attendees…last call for RaveQuest: A New Merge 🦋🎭💃
Amazing performers, immersive activities, and other surprises we can’t wait to unveil throughout the night!
The Quest will go on, rain or shine…but move fast because registration closes sooObX
That’s a wrap on our lightning talks at #devcon2022 ⚡
Jan Gorzny, Ph.D. presented
An Overview and Wishlist for Rollup Escape Hatches
Twiends™ uses the Twitter™ API, displays it's logo & trademarks, and is not endorsed or certified by them. These items remain the property of Twitter.
We do not sell followers, we only provide display advertising. Bots & fake accounts are not permitted on twiends. © 2009